CVE-2025-22081

low-risk
Published 2025-04-16

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + sizeof(struct NTFS_DE)" addition can have an integer wrapping issue. Fix it by using size_add().

Do I need to act?

-
0.11% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (8)

Patch https://git.kernel.org/stable/c/0538f52410b619737e663167b6a2b2d0bc1a589d
Patch https://git.kernel.org/stable/c/0922d86a7a6032cb1694eab0b44b861bd33ba8d5
Patch https://git.kernel.org/stable/c/0dfe700fbd3525f30a36ffbe390a5b9319bd009a
Patch https://git.kernel.org/stable/c/1a14e9718a19d2e88de004a1360bfd7a86ed1395
Patch https://git.kernel.org/stable/c/284c9549386e9883855fb82b730303bb2edea9de
Patch https://git.kernel.org/stable/c/4d0f4f42922a832388a0c2fe5204c0a1037ff786
Patch https://git.kernel.org/stable/c/5ad414f4df2294b28836b5b7b69787659d6aa708
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal